Microsoft disrupts EvilTokens, AI scam platform that hijacked 12,000 accounts

Ars Technica AI · rss · 2026-09-23

Microsoft said it led an industry-wide disruption of EvilTokens, a subscription-based scam platform that compromised 12,000 Microsoft accounts in a few months. Launched via Telegram in February at $1,500 upfront plus $500/month, its core was an AI chatbot that analyzed victims' inboxes, identified trusted relationships and payment authorizations, prioritized high-payout targets, recommended fraud strategies, and drafted impersonation emails — compressing attacks from days to minutes.

Original post →

More from Safety

Safety channel →